Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
File: 3l428Vn1dpiPtOUdQQG7hdDQyYM.mft (raw, json)
Hash identifier: e21Y3nTePprioxN7AHtHW2ouaQ0wbxBPnWSorQHbviE=
Subject key identifier: FE:C0:3E:82:C4:C1:A0:EF:A5:46:76:CF:E2:0D:AE:41:A0:C6:99:DE
Authority key identifier: DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83
Certificate issuer: /CN=de5e36f159f576988fb4e51d4101bb85d0d0c983
Certificate serial: 019DD20857D921BBC8439CD3139516CF60B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
Manifest number: 12E3
Signing time: Tue 28 Apr 2026 03:00:55 +0000
Manifest this update: Tue 28 Apr 2026 03:00:55 +0000
Manifest next update: Wed 29 Apr 2026 03:00:55 +0000
Files and hashes: 1: 3l428Vn1dpiPtOUdQQG7hdDQyYM.crl (hash: hbJq6BhHARzwHFPKciJcaIGioLfo0fsDjvgJUg+VmBs=)
2: 8tt6sbRcYdZ62Hlyx9KV5xcE06I.asa (hash: 0Y7iz76vgEOY5ho3DHxIE4tgSCKOh0nYjQCm1eEOdkw=)
3: CnP7xic-J3ZlsEiL_ErvWxwtjH4.roa (hash: 5VuIA/sliXJSN13FjulNtyBF4Z5iaCwmwNeqLvTqwQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d2:08:57:d9:21:bb:c8:43:9c:d3:13:95:16:cf:60:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5e36f159f576988fb4e51d4101bb85d0d0c983
Validity
Not Before: Apr 28 03:00:55 2026 GMT
Not After : Apr 29 03:00:55 2026 GMT
Subject: CN=fec03e82c4c1a0efa54676cfe20dae41a0c699de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9a:4e:ad:97:3a:5a:50:51:2c:73:79:1b:e1:
3b:12:e8:72:bd:4a:ab:d7:ce:6a:e8:8b:fe:9f:05:
5f:bc:44:f3:f4:1f:b8:33:7f:29:f8:f2:8b:7a:18:
09:10:02:6d:71:da:6c:fe:c3:37:e0:3e:14:a6:1e:
7b:a0:ad:3b:ae:c9:5e:55:bd:90:71:bd:f0:3f:0b:
b3:37:a8:13:c9:40:aa:8e:5d:62:f6:fb:62:0e:38:
cf:8e:0f:55:fd:ea:95:74:42:35:0e:f1:5a:0c:84:
3f:a7:2d:f2:21:c3:0a:5b:1a:6f:f5:b7:6c:6a:d1:
95:fc:cf:04:16:40:a9:19:77:dd:48:22:4b:3c:96:
d2:1c:bc:7f:24:7b:8b:28:9a:3a:88:7a:de:0e:07:
3e:51:ea:b6:a0:db:33:34:50:4e:22:17:ca:e6:82:
18:30:90:15:2c:8d:6c:69:c2:89:63:ed:fe:1d:63:
15:13:94:b0:73:9f:8f:98:60:7c:1c:b9:5f:38:cf:
94:30:92:ca:2a:57:94:ac:06:a5:79:17:09:6f:6b:
e5:ec:47:1a:ef:b2:93:a0:2e:30:ff:5d:55:7d:11:
ed:f1:41:34:9e:e7:94:bc:e5:cf:ae:f3:b0:72:09:
64:a0:1e:8e:9a:ef:e5:d9:55:38:74:98:fe:ac:0a:
98:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C0:3E:82:C4:C1:A0:EF:A5:46:76:CF:E2:0D:AE:41:A0:C6:99:DE
X509v3 Authority Key Identifier:
keyid:DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:51:87:89:71:09:52:e0:0b:b5:77:db:14:92:ac:93:8f:21:
e1:9b:37:c4:03:a8:28:68:48:d9:cb:58:f9:56:79:24:e1:86:
75:86:40:be:8f:e6:92:4a:df:51:71:6c:90:2f:b7:5f:4f:87:
64:2b:1c:36:31:e6:26:59:8d:8e:46:d8:2d:83:48:79:be:28:
59:5d:01:e2:a4:30:92:0d:e4:5a:f0:9b:da:95:31:55:85:b1:
09:1d:74:4a:e5:1d:14:ac:0d:d4:ba:85:8e:02:d9:74:40:49:
98:f6:af:c0:bc:9d:75:14:34:f0:82:0d:d3:95:e5:b7:65:e0:
0d:59:be:53:a3:39:ca:d2:4f:2d:f2:81:57:de:f1:30:21:9a:
17:5e:d3:41:64:e2:b1:02:53:cd:e3:62:e7:06:83:2b:18:6f:
48:80:03:0a:24:e4:5a:7f:88:c0:6a:60:4d:de:46:f6:a1:d3:
a2:02:8b:b4:1d:af:c1:3b:b5:ef:bc:22:f7:02:fe:c7:a7:90:
51:40:de:68:cd:3b:88:fc:e5:bc:4d:08:d9:6c:23:17:13:80:
d1:91:2c:2d:57:e6:e7:b0:f2:04:b9:5d:47:02:35:c1:fa:3d:
02:89:1d:4c:bd:7e:32:c2:ad:fb:54:b3:5f:e9:a3:a0:51:ed:
16:90:00:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 09:02:11 2026 by rpki-client